漏洞描述
泛微e-cology是专为大中型企业制作的OA办公系统,支持PC端、移动端和微信端同时办公等。攻击者可通过该漏洞读取系统重要文件（如数据库配置文件、系统配置文件）、数据库配置文件等等，导致网站处于极度不安全状态。
泛微 e-cology XmlRpcServlet 接口文件读取漏洞
PoC代码
暂无相关漏洞推荐
- 泛微e-cology 前台SQL注入漏洞
- ecology-ebridge-addtaste-sqli: 泛微云桥 taste/addTaste SQL注入
- ecology-ifnewscheckoutbycurrentuser-dwr-sqli: 泛微 E-Cology ifnewscheckoutbycurrentuser.dwr SQL 注入
- ecology-ktreeuploadaction-upload: 泛微 e-cology 任意文件上传
- POC CNVD-2022-43245: Weaver OA XmlRpcServlet - Arbitary File Read
- POC CNVD-2023-12632: 泛微 OA e-cology v9 sql 注入
- POC ecology-e-office-mysql-config-leak: 泛微OA E-Office mysql_config.ini 数据库信息泄漏
- POC ecology-arbitrary-file-upload: 泛微OA e-cology V9前台任意上传漏洞
- POC e-cology-e-office-officeserver-file-read: 泛微OA E-Office officeserver.php 任意文件读取漏洞
- POC e-cology-filedownload-directory-traversal: 泛微OA e-cology 文件下载目录遍历
- POC e-cology-getsqldata-sql-inject: 泛微OA E-Cology getSqlData SQL注入漏洞
- POC e-cology-hrmcareerapplyperview-sqli: 泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞
- POC e-cology-jqueryfiletree-ile-inclusion: 泛微OA E-Cology jqueryFileTree.jsp 目录遍历漏洞